Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: QtTq/gECzxfPw3oKQlBnum3DfgVwXab831sInkkKfs4=
Subject key identifier: 1D:30:11:10:9F:AC:9B:C2:AA:51:8D:9C:CD:19:E2:CF:77:7C:88:16
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 01975EA68978882AEC744525A111D352B2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 1218
Signing time: Wed 11 Jun 2025 11:01:01 +0000
Manifest this update: Wed 11 Jun 2025 11:01:01 +0000
Manifest next update: Thu 12 Jun 2025 11:01:01 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: TOMXkSd1bqYi2bblSkyj3yq+oUecqlYk1BozWu1zCzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:89:78:88:2a:ec:74:45:25:a1:11:d3:52:b2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Jun 11 11:01:01 2025 GMT
Not After : Jun 12 11:01:01 2025 GMT
Subject: CN=1d3011109fac9bc2aa518d9ccd19e2cf777c8816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:51:f7:e6:68:44:c8:03:84:00:45:bd:0e:
54:cc:39:22:56:6d:dc:ad:14:1c:6c:bd:ff:d3:ee:
6e:3e:66:58:f5:b5:a3:5f:03:bf:c8:a9:52:ce:b4:
80:74:cd:bd:84:ee:30:a2:0c:6e:17:74:59:39:b8:
fd:50:fc:96:34:8d:70:e6:f7:58:1d:bd:9e:6f:aa:
65:12:5f:47:d9:60:19:6d:23:27:9b:40:60:62:31:
05:2d:25:1b:5f:de:2d:34:ce:d9:aa:45:00:69:b6:
3b:c9:f9:47:7a:d0:82:77:98:84:42:a1:b9:0c:86:
0a:48:10:b1:c1:2a:ff:2c:2f:33:42:86:cc:c1:0e:
8e:c6:04:ed:97:ce:9e:4c:50:aa:6c:da:4f:c6:50:
01:74:79:8c:68:65:21:c9:2c:df:ac:ac:74:7f:25:
a5:40:42:6d:36:33:67:9b:53:79:10:19:39:2d:3b:
d6:31:bb:84:ea:c5:f0:8f:04:01:fb:c9:fd:95:e0:
0c:ed:2e:09:5a:2a:c0:a1:44:56:e1:62:4d:a3:09:
49:c3:96:0b:78:90:95:01:20:da:4b:32:7d:6a:45:
b9:7f:68:dc:4d:cd:13:98:75:32:24:d6:da:36:a2:
68:51:ed:6f:66:53:6a:94:63:80:a1:8d:7a:4f:5f:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:11:10:9F:AC:9B:C2:AA:51:8D:9C:CD:19:E2:CF:77:7C:88:16
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:72:f3:62:0b:f1:c2:67:5d:95:09:95:c2:13:ce:5b:33:
fe:f7:35:ef:d8:33:50:97:4d:dc:5b:8f:82:61:63:8c:b3:1c:
17:b5:be:8b:51:47:d3:bb:59:77:f0:4d:02:d2:36:ea:02:30:
b0:4a:bf:e8:b4:f1:90:ca:23:fc:07:97:da:70:66:e4:3b:d5:
86:7e:8d:3c:46:3a:b1:69:98:cd:bb:9a:28:31:90:28:83:55:
66:1e:c5:80:0f:f0:ee:23:53:e1:50:ae:fc:12:a1:83:61:ca:
1b:ed:aa:14:7f:69:a7:3f:f7:c7:8b:0d:2d:97:be:b4:0e:62:
6b:15:46:3f:54:78:9a:f5:2c:41:ad:83:80:ca:34:85:be:dd:
a2:a4:fd:08:64:5c:d3:fa:70:c2:57:54:80:15:c9:11:ed:4d:
14:46:78:a2:7e:01:6d:94:1b:9f:4d:a4:9a:13:0b:5a:a8:d6:
69:de:34:2c:6e:b4:b5:e8:07:5c:cd:fe:2a:12:dd:0b:d4:4f:
0d:b9:a6:54:0c:bf:2f:6b:4f:d5:88:8f:7e:2f:fc:63:e2:54:
a3:cd:70:9a:79:9a:a7:1a:94:77:6d:8e:36:b6:df:af:c0:6a:
df:29:48:51:9b:f2:55:98:11:ea:ab:b7:94:70:d7:6e:4e:28:
ca:1d:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:39:48 2025 by rpki-client